Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/4c3e19-a489-4e3a-a3a2-7e52e749c3ad/1/tYe8Eust4poQJrj1a-jUafL1jPM.mft
File: tYe8Eust4poQJrj1a-jUafL1jPM.mft (raw, json)
Hash identifier: BpVtc6j9asQiEiFjVg2zBrUeprinljs8ClAzUjQxmeQ=
Subject key identifier: 5C:4E:03:96:99:E0:F9:CA:F3:11:E3:1D:C4:E4:01:CF:ED:72:24:D9
Authority key identifier: B5:87:BC:12:EB:2D:E2:9A:10:26:B8:F5:6B:E8:D4:69:F2:F5:8C:F3
Certificate issuer: /CN=b587bc12eb2de29a1026b8f56be8d469f2f58cf3
Certificate serial: 01987B2D69A6C6E568CCB4CB472BDBA0ECAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tYe8Eust4poQJrj1a-jUafL1jPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/4c3e19-a489-4e3a-a3a2-7e52e749c3ad/1/tYe8Eust4poQJrj1a-jUafL1jPM.mft
Manifest number: 161A
Signing time: Tue 05 Aug 2025 17:00:30 +0000
Manifest this update: Tue 05 Aug 2025 17:00:30 +0000
Manifest next update: Wed 06 Aug 2025 17:00:30 +0000
Files and hashes: 1: SRbcYTDvBK2K42GBZURfc-9owLk.roa (hash: ou7G18aw8/QVFexo/f3lobAxj/5Hzi02IWmge/V7dxQ=)
2: tYe8Eust4poQJrj1a-jUafL1jPM.crl (hash: OEZUR2M+DsACsK2QyZIGoT70AjXD0YT1EiI0SaQBsG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/4c3e19-a489-4e3a-a3a2-7e52e749c3ad/1/tYe8Eust4poQJrj1a-jUafL1jPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/4c3e19-a489-4e3a-a3a2-7e52e749c3ad/1/tYe8Eust4poQJrj1a-jUafL1jPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tYe8Eust4poQJrj1a-jUafL1jPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 17:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:2d:69:a6:c6:e5:68:cc:b4:cb:47:2b:db:a0:ec:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b587bc12eb2de29a1026b8f56be8d469f2f58cf3
Validity
Not Before: Aug 5 17:00:30 2025 GMT
Not After : Aug 6 17:00:30 2025 GMT
Subject: CN=5c4e039699e0f9caf311e31dc4e401cfed7224d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9c:5d:70:07:9a:fc:64:7f:91:15:6d:61:0b:
55:00:a9:1e:75:af:b9:00:2a:d0:b1:6e:21:cd:c9:
de:64:47:7b:9e:65:58:3b:72:68:7b:0a:02:b3:eb:
06:bf:60:28:aa:fd:32:fb:74:07:51:71:15:39:78:
4e:d5:d1:c8:9b:97:36:4d:e9:b3:29:bd:f3:45:01:
3f:4c:8d:02:46:57:f5:87:ec:46:fc:c9:c4:12:66:
4a:d2:2a:83:e1:ef:51:40:e3:b6:5b:61:4a:26:e3:
b0:da:ed:c8:ed:76:89:64:e4:06:0f:6c:20:84:f6:
f1:f9:dd:92:70:fb:f3:cb:66:9f:06:49:3a:96:15:
72:c1:5e:6c:06:d1:02:ad:2c:11:a3:d8:7d:9a:7c:
b9:f8:63:bc:33:a0:e6:83:85:4c:1d:3b:d9:02:e3:
70:c3:5d:25:56:81:04:1c:63:35:88:c3:eb:a2:fb:
e8:f4:4c:4e:98:c2:e8:28:91:d8:60:f8:05:50:0c:
29:a3:c8:70:20:98:9a:27:08:45:2a:7d:a6:db:9f:
a8:9d:c1:22:4e:2c:e7:d4:14:6f:8a:f8:8f:c5:a1:
8f:a0:18:17:6c:bb:1f:54:b8:bd:ec:bc:f8:24:be:
0d:c0:50:f5:e6:10:81:88:a7:38:fc:ce:19:9c:e9:
84:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:4E:03:96:99:E0:F9:CA:F3:11:E3:1D:C4:E4:01:CF:ED:72:24:D9
X509v3 Authority Key Identifier:
keyid:B5:87:BC:12:EB:2D:E2:9A:10:26:B8:F5:6B:E8:D4:69:F2:F5:8C:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tYe8Eust4poQJrj1a-jUafL1jPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/4c3e19-a489-4e3a-a3a2-7e52e749c3ad/1/tYe8Eust4poQJrj1a-jUafL1jPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/4c3e19-a489-4e3a-a3a2-7e52e749c3ad/1/tYe8Eust4poQJrj1a-jUafL1jPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:8f:88:cb:da:80:da:4e:47:50:0d:d4:90:15:8b:e5:a4:00:
db:08:00:2f:4f:c3:cc:8a:63:5e:72:78:37:cb:dd:e7:1d:f0:
51:76:f0:7c:7b:ab:b7:21:e4:a6:f6:3d:8b:f5:11:35:b1:79:
a9:6d:9b:8e:2b:7c:a6:bb:6e:97:27:d2:cf:9c:d1:45:c2:20:
ce:7a:c5:ab:03:2e:b2:a0:33:de:02:51:98:a9:ff:9a:59:b2:
21:66:02:d8:64:11:aa:3d:ff:44:f8:62:17:5c:49:1f:95:68:
ab:d4:94:ef:29:db:d5:6a:c0:bb:14:28:58:ff:21:6f:27:ec:
0f:0c:fd:82:c4:e3:0d:73:7f:f2:17:31:09:7f:7e:5a:28:8c:
79:f6:11:68:05:d9:41:c7:6b:16:46:a9:21:31:a5:5b:b1:c0:
62:68:87:16:9b:40:28:61:c3:f1:81:e1:8d:a8:3d:5e:53:62:
d1:f7:5e:a6:c1:1f:68:e5:5b:fc:15:6c:c4:22:e0:5b:e1:a4:
02:3a:21:d5:22:18:5a:b8:d5:1a:c3:71:00:f5:d2:44:61:a6:
41:dc:ec:08:23:43:8f:2b:a9:6e:f4:54:25:db:51:2a:a5:ab:
88:89:31:ad:3c:fe:08:87:01:9c:14:69:21:d4:e6:b1:f9:29:
ae:f2:eb:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 03:58:00 2025 by rpki-client